Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

02/10/2023, 05:59

231002-gpqn5sfe9y 10

Analysis

  • max time kernel
    4009387s
  • max time network
    133s
  • platform
    android_x64
  • resource
    android-x64-20230831-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system
  • submitted
    02/10/2023, 05:59

General

  • Target

    app.apk

  • Size

    2.1MB

  • MD5

    b4e81f83647d9bdfde8c3bed024de1f4

  • SHA1

    ebb7a5bae95f7ea04198e95d01dba427106c7bf9

  • SHA256

    7bc96cb82739ddadf27b1fea759b61aedabba949660d1b5c29034ef531568a36

  • SHA512

    cc69472ef7dfd6d7eec032d73c8bc3762d14a8a382c2aea633ffe0cc92d5d9a99167f0ca01451e8d6f86d3f48de7327c6fdfd2bd287334a995d8b808a435a56f

  • SSDEEP

    49152:ZEApvcCI5rSRAv2P/6aaKzmgxra2IenQbfyDZDCmn61ch6LD1F:ZJpvc7rSj4lgVa2kNmn61VP1F

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.MrXnxVip.global
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:5052
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:5183

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.MrXnxVip.global/cache/1

      Filesize

      690B

      MD5

      bdd89b9d5f598ff13f4d9eaecfe86033

      SHA1

      fc4926068a2c242847710dd623f0a60e3b405e70

      SHA256

      cf40a58b3b009116d3469ebb16808827519f22eb6216aa9dd2740c389199ea79

      SHA512

      f74423fa0d082f4e011c3e60abc2f81825e872e6a78ee30d9c4a7b2b357f4cad0a4921789538554194cbfa4f3a9d99713676cd29f7941bcdcd4cc891455b4b88

    • /data/data/com.MrXnxVip.global/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      f646c12b065340c235bb42b3f62fc6dc

      SHA1

      d9bb592444b51fbf5593f783e9278864b5b4b667

      SHA256

      4abef24107334c468cbc3645a1e2a1ad4a62aac1a5ee63ce14403c932de2293e

      SHA512

      6b8db2cb211716bfd8efe66c835f1184b632bcae5b57ce14b4b80149c92c068063503c71d0fe0831dab6584e2d86196adfe69611e5695e82ccadcccefc1418d5

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      35769e864d2fc20147bf4047c4bcab2d

      SHA1

      619fe9bddefd5bda55f5e19c6def547925b864ab

      SHA256

      e279f2bf2d6ccba5b6a6278fb7e318e063a9506dd6806498751726f4ebc645be

      SHA512

      0d94b8231c3577102bb2f1e250f565c0e07570a8013f609b7f7dd55452519e82edd8080b85db3c1c5fb0674946c8e06116ad158ac8b06ab5cca2f77ede83bebd

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      6971b171e1dee0d303a48d810fe2e578

      SHA1

      80da6463a00a2f5cc93d83e77c2c2a1106c7fc71

      SHA256

      81c7351ab15f5f366f3403e02e2871d1420366a983734553ab110ba2ffad7169

      SHA512

      007adce2fbf64d646164371a4a0cb5c211719cb34c78e94368b05b7377f73e2eb93558f3d724bfa6260f178ec30693fb2bc54065644976f963548b487a5a6fab

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      93ffbb6eeab5b58c26fff8943cdc2ba8

      SHA1

      153dbf60346874261cc8482e63b90954d6afb185

      SHA256

      795903094ac5481d8e2d94ece433da65cb453cb669b354d9f8f6d2335bcecf0c

      SHA512

      6fb240d2fa4018282d5a08a6af57aebd8c724f79c4273ae1285f63fa346ed4a7dbaf0bc2d293efb6e602be3be59882d29a9f52925a175b8b91621a5b533f4158

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      adf6082723784327d7d1b34adf974e7d

      SHA1

      b1502f70eb881a1dfe41139cb719fefb877ee37c

      SHA256

      252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9

      SHA512

      762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      eb52a90bb70b76e946b62f50b6f7fb85

      SHA1

      42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

      SHA256

      48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

      SHA512

      b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      ddab6061a12cd9a176ef7461ff5cf164

      SHA1

      14e71e72cb83e159c6432e866cbc009e32cc116a

      SHA256

      5e20e8390b2395263c34bdf03d10e7463941fd6d99fc8d14b9a84dceea9414f5

      SHA512

      7ec6492e39174e21950bc93e621a19b4205da71ea95430a29655b76704e1d5aceb25697d28ff91e7955ea2aa2f00787d675f73c68e5e04f7bdb7660427ff451a

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      ef0b558a51e1104dfc65c95787651fe0

      SHA1

      d8c3cc5107e528db0243540aa622c9ae1ba53d79

      SHA256

      a9ebd78e8325f479a8657ad3be4292b9a01d20a910fb31f0bccd5e7acae049c5

      SHA512

      8e3f1c951faeefc19ea65e210ea134be52cd4e100e89611a6c5617716063e1cd4dc8ea59cedddb8a384af17cda1da254515e1f053c4e3d06f67b57cefcf36c2a

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      f93ccbe6717b447a9c2a4dde90896256

      SHA1

      16fe9c2612c8c6be31cb0fcd120de9af65c9da55

      SHA256

      644a1bd5b1bd9ca2d4cb09d51e3c8c0c4935093c15d48b5c0e0f0c309223bb7b

      SHA512

      b0193446691fc0b1fdcada9c03a108bc6286583abb913cc8685628375688b65a2bf48ce094a51b9e7a33f3b0663d0b6186a7062bc0c1e2385e8324bd6db9d24e

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      7e325c95d35c80015b276755b6bfc639

      SHA1

      09be1bf9f886e6ae365c8a9fc299a2d575892617

      SHA256

      91894f9193fbfdd604aaa21d35f6280636e3d2db1e46980e9465212cf032037d

      SHA512

      204957c2d9b63168e7760e6c55a64a21e45a1d9d39f72f2336effd43d8852c96c6934ecc9efaaaccf08612d4b60d817d36debe77163055c1fcda7bc952afce0b

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      b6c8d0149a7853516ed9030d2e5cedd9

      SHA1

      4c43d11e9dd92c1ea4f8e8d673bb5a22ebcf88c2

      SHA256

      f518c50f1d0a74d2c36729d92e370d801317ee0d7f0823cd58a109e578b6fb9a

      SHA512

      b44a7bbf2bcce4de0f5c543c5aca30da612c84050cf0e71e14cfbe9c121fab3cc796b84f9321ddd882ff500b2aceecb788aeda40768b7aa7b8678ae25bccde3d

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      6586db6047d4c7eabb6e7dabdaac097f

      SHA1

      cbf6ce730e50c12b7da12ddd2d2d70e5892b1d99

      SHA256

      4b70ae0caf6dabd3b4ec9a84b0ef3142e153d559555749f09487054221614709

      SHA512

      7d90dbec8d10f9e32c81b62c406796707042805c3075974d39845fb5b380dcaaeade24c81d4f5a490b45ea644e47bba3a003fae2c17101fcb786ce347fa01ec6

    • /data/data/com.MrXnxVip.global/files/NULL.txt

      Filesize

      10B

      MD5

      68e109f0f40ca72a15e05cc22786f8e6

      SHA1

      db8ac1c259eb89d4a131b253bacfca5f319d54f2

      SHA256

      872e4e50ce9990d8b041330c47c9ddd11bec6b503ae9386a99da8584e9bb12c4

      SHA512

      8ae6ae71a75d3fb2e0225deeb004faf95d816a0a58093eb4cb5a3aa0f197050d7a4dc0a2d5c6fbae5fb5b0d536a0a9e6b686369fa57a027687c3630321547596

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation42519592258741486tmp

      Filesize

      568B

      MD5

      7aaf15605d652e71e97a86d7094b1267

      SHA1

      247e0204b39cfc04bc8a5e9a91b9133163e1c051

      SHA256

      b4f0086d7945d2fe919841e1b428458ca24f4a370080204471c6861f0728a518

      SHA512

      7d87845224d7e4f5d64d597ef49dfce8d64de3660fb21cdc501cb0f4203e9ae12594019cc897273eb7c73fb4797d90b97d241b6601432e412c645db86ca612f5

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation9071050022075942607tmp

      Filesize

      90B

      MD5

      d8b522b6e1a6c365992ad2be77999645

      SHA1

      ab7b7b73f0cf91bf7a0e015cd37fc3153d1a4dcf

      SHA256

      b00702520e334540301d8eddfd28bd05fc47012489c2c5e8c84c239c1c9bc29f

      SHA512

      ce2732b22b05fc7ca11b13035a77199b27d07391e6bf26941205ec241e05a8e5ef7d9c73f03645a3505225cfbfbcb2dcbe4ea81fd92e6674150f56c810427796